A. They compare the 5-tuple of each incoming packet against configurable rules.B. They cannot track connections.C. They are designed to work most efficiently with stateless protocols such as HTTP or HTTPS.D. Cisco IOS cannot implement them because the platform is stateful by nature.E. The Cisco ASA is implicitly stateless because it blocks all traffic by default.

A. A private VLAN partitions the Layer 2 broadcast domain of a VLAN into subdomainsB. A private VLAN partitions the Layer 3 broadcast domain of a VLAN into subdomainsC. A private VLAN enables the creation of multiple VLANs using one broadcast domain D. A private VLAN combines the Layer 2 broadcast domains of many VLANs into one major broadcast domain

Answer: A

QUESTION 122Which Cisco feature can help mitigate spoofing attacks by verifying symmetry of the traffic path?